{"id":3675,"date":"2014-04-29T01:01:29","date_gmt":"2014-04-28T17:01:29","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3675"},"modified":"2014-04-29T01:01:36","modified_gmt":"2014-04-28T17:01:36","slug":"blindelephant-web-application-fingerprinter","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2014\/04\/blindelephant-web-application-fingerprinter\/","title":{"rendered":"BlindElephant – Web Application Fingerprinter"},"content":{"rendered":"
The BlindElephant Web Application Fingerprinter attempts to discover the version of a (known) web application by comparing static files at known locations against precomputed hashes for versions of those files in all all available releases. The technique is fast, low-bandwidth, non-invasive, generic, and highly automatable.<\/p>\n
<\/p>\n
BlindElephant can be used directly as a tool on the command line, or as a library to provide fingerprinting functionality to another program.<\/p>\n
Features<\/strong><\/p>\n There are other similar projects such as:<\/p>\n – WAFP \u2013 Web Application Finger Printing Tool<\/a> You can grab BlindElephant from the SVN repo here:<\/p>\n\n
\n– WhatWeb \u2013 Next Gen Web Scanner \u2013 Identify CMS (Content Management System)<\/a>
\n– wig \u2013 WebApp Information Gatherer \u2013 Identify CMS<\/a>
\n– Web-Sorrow v1.48 \u2013 Version Detection, CMS Identification & Enumeration<\/a>
\n– Wappalyzer \u2013 Web Technology Identifier (Identify CMS, JavaScript etc.)<\/a><\/p>\nsvn co https:\/\/blindelephant.svn.sourceforge.net\/svnroot\/blindelephant\/trunk blindelephant<\/pre>\n